CVE-2022-46710

MEDIUM

iOS <16.2- iPadOS <16.2 - macOS Ventura <13.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet.

References (2)

Core 2
Core References
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213530
Release Notes, Vendor Advisory
https://support.apple.com/en-us/HT213532

Scores

CVSS v3 5.5
EPSS 0.0008
EPSS Percentile 23.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-841
Status published
Products (3)
apple/ipados < 16.2
apple/iphone_os < 16.2
apple/macos < 13.1
Published Jan 10, 2024
Tracked Since Feb 18, 2026